Privacy Policy

1. Information we collect

Depending on how you use Shards, we may collect or store:

• Discord account data returned by OAuth, such as your Discord user ID, username, global name, and avatar hash.
• Encrypted Discord OAuth tokens needed to keep your dashboard session working.
• Server and membership data such as guild IDs, guild names, guild icons, ownership flags, and permission snapshots returned by Discord.
• Settings, presets, access rules, onboarding progress, audit history, and other dashboard configuration data submitted through the service.
• Operational bot data such as sync state, feature manifests, bot-reported guild state, and activity or event logs that may include summaries, channel IDs, actor IDs, and related metadata.
• Notification preferences, including whether you opted in to admin DM alerts.
• Custom bot credentials that server administrators submit for hosted custom bot support; those tokens are stored encrypted.
• Premium and entitlement metadata returned by Discord, such as SKU identifiers, entitlement IDs, subscription or purchase state, renewal or expiration timing, and whether premium access was purchased, gifted, promotional, or manually granted.
• Premium sync data such as guild IDs, entitled user IDs, configured premium role IDs, and role-sync outcomes needed to provide Luxury or Luxury+ access and related perks.

2. How we use information

We use information to authenticate users, display servers you can manage, save dashboard settings, sync configuration with the bot, show logs and audit history, maintain security, troubleshoot issues, improve the service, validate premium entitlements, enforce tier limits, and grant or remove premium-linked role sync where configured.

3. Premium purchases and Discord billing

Luxury and Luxury+ purchases and recurring subscriptions are handled through Discord. Discord and its payment providers process payment methods, billing details, subscription renewals, cancellation flows, refunds, and certain transaction records.

Shards may receive limited monetization and entitlement metadata from Discord so the service can determine whether a guild or account should receive premium access, restore or revoke access, sync premium-linked roles, investigate support issues, prevent abuse, and comply with platform rules.

Shards does not directly collect or store full payment card numbers, bank account details, or equivalent full payment credentials for Discord-handled premium purchases.

4. When information is shared

We do not sell personal data. Information may be shared only as needed to operate the service, such as with Discord, hosting or infrastructure providers, or authorized server admins using the dashboard for their server.

If you choose to publish a preset publicly, the preset and related public metadata may be visible to other users.

Premium status, entitlement state, and role-sync results may also be shared with Discord and surfaced inside the dashboard to authorized server admins when needed to manage premium access for that server.

5. Security and storage

The application stores Discord OAuth tokens and custom bot tokens in encrypted form at rest. We also use session controls and CSRF protections in the dashboard.

Premium-related records, including entitlement metadata and configured premium role sync identifiers, are stored with access controls intended to limit access to authorized systems and administrators who need the data to operate or support the service.

The application code does not persist IP addresses in audit log storage, although standard hosting or network providers may still process connection logs outside the app itself.

6. Retention

We retain information for as long as it is reasonably needed to operate, secure, and support the service. Retention may vary by record type. Some stale bot installation metadata may be cleaned up after extended inactivity.

Premium-related records may be kept while an entitlement is active and for a reasonable period afterward for renewals, restoration, fraud prevention, dispute handling, auditing, compliance, and support.

7. Your choices

You can stop using the service at any time by removing the bot from your server and not logging into the dashboard. Server admins can also remove certain hosted custom bot settings and update dashboard data they control.

If you have a Discord-handled recurring premium subscription, cancellation should be completed through Discord's subscription management flow. Removing the bot, leaving a server, or disabling role sync does not by itself guarantee that a Discord subscription is canceled.

8. Children's privacy

Shards is not directed to children under the minimum age required to use Discord in their region. Do not use the service if you are not permitted to use Discord.

9. Policy changes

We may update this Privacy Policy from time to time. When we do, we will update the effective date on this page.